Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Yi_RO1baOH2C5EQ0iUovOmtFp5I.roa
File: Yi_RO1baOH2C5EQ0iUovOmtFp5I.roa (raw, json)
Hash identifier: yqQFM1pr1/7GgGUjvzxkhQUVUrWFHhF3PyfojkfFxqY=
Subject key identifier: 62:2F:D1:3B:56:DA:38:7D:82:E4:44:34:89:4A:2F:3A:6B:45:A7:92
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A0D84B15D3F805BC1E34269BE615E0CC39
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Yi_RO1baOH2C5EQ0iUovOmtFp5I.roa
Signing time: Fri 25 Sep 2026 11:19:54 +0000
ROA not before: Fri 25 Sep 2026 11:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.172.0/22 maxlen: 22
212.100.176.0/22 maxlen: 24
212.100.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 27 Sep 2026 06:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:4b:15:d3:f8:05:bc:1e:34:26:9b:e6:15:e0:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 25 11:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=622fd13b56da387d82e44434894a2f3a6b45a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:52:2f:69:19:3c:13:e9:92:f7:83:f7:09:b2:
42:d1:03:d0:b8:60:9a:d5:2e:f4:5b:8e:e5:c4:06:
3d:35:f0:8b:03:32:31:d1:ac:af:a1:ae:00:00:c5:
75:6f:c5:2d:6b:09:07:b2:08:b7:0c:da:5c:03:d3:
a8:3c:9a:27:f7:19:ad:b4:3a:89:a4:4a:7e:71:a1:
1a:1c:89:fa:ed:43:30:11:ac:6d:bb:5c:53:2f:52:
9a:1c:65:77:5a:3b:bd:6d:4c:77:3f:40:5d:b8:61:
a9:d7:bf:46:c7:89:36:d5:69:8a:a6:40:69:6e:97:
1e:99:50:5a:02:2a:77:cc:e3:a7:c1:7d:a4:26:c6:
43:26:86:bf:6c:bb:a0:75:54:2c:12:f3:f6:53:26:
93:13:d3:e8:37:7b:16:7c:00:bf:ff:9d:02:d1:4e:
7c:23:50:33:fb:b1:12:be:93:54:9b:f0:4f:06:d2:
7e:7e:2c:5a:e1:4c:13:dd:34:9d:5a:a0:a1:5d:11:
5a:40:fe:f7:f4:34:ce:dd:4a:0f:a0:45:d0:42:db:
d8:71:e3:d5:55:2a:4a:63:c2:31:d9:93:db:98:f0:
3c:8e:83:94:d9:70:b7:a7:ea:a9:a6:00:14:e1:88:
57:aa:61:6d:0d:6e:6a:f0:58:7f:c1:f2:38:80:7f:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:D1:3B:56:DA:38:7D:82:E4:44:34:89:4A:2F:3A:6B:45:A7:92
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Yi_RO1baOH2C5EQ0iUovOmtFp5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.172.0-212.100.179.255
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:bc:06:29:e5:4b:f5:95:5c:ab:ee:f0:cf:ab:58:b1:5f:df:
e6:b6:02:41:d8:be:79:7c:8a:fa:87:5d:67:22:6a:5c:b3:ce:
fa:26:53:ab:21:42:d6:a7:74:87:45:26:6f:27:c4:01:bb:3b:
fa:20:7b:4c:93:9f:65:c4:1d:ed:33:85:a7:09:79:da:60:00:
d1:1d:e4:59:5c:39:d6:79:2d:28:b9:83:9c:cf:48:b4:3d:fa:
2e:1a:20:cd:9e:67:6b:d6:d3:5d:bf:17:9e:54:b8:41:68:0f:
b4:53:06:f2:1a:c4:fc:d3:b0:53:b3:db:ca:cd:b0:13:c9:af:
ca:2b:cd:9f:d8:cb:da:02:c3:b9:7b:8d:d3:38:fd:21:eb:ed:
f5:4e:7a:53:21:0e:8e:2f:b1:0a:b1:c9:86:0f:bb:7d:cb:7c:
9f:5b:84:39:f6:ee:36:3c:34:eb:9b:1f:d7:b7:4b:72:2a:47:
e1:a8:02:4b:d2:89:62:be:78:62:2b:92:26:29:4f:e2:70:9e:
e4:2d:40:e2:f7:3c:59:e8:aa:6f:51:f7:c6:2a:26:4f:95:e9:
13:9e:81:78:26:6c:95:b8:e8:4e:b3:a9:01:20:42:d1:52:24:
3d:53:53:e3:5d:41:4d:10:3c:b3:3a:48:54:6a:60:f1:78:c6:
45:53:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:18:44 2026 by rpki-client